AMMO INC
For the period ended Mar 31, 2024. Filed Jun 13, 2024.
View on SEC.govAbout this filing
A company's yearly report to the SEC, with audited financial statements. It is the fullest account a company gives of its business, its finances and the risks it sees.
FY2024 · Filed Jun 13, 2024
Extracted filing text, with the paragraph anchors used by the comparison.
See the whole filing, with its images and exhibitsContents
Item 9A. CONTROLS AND PROCEDURES
As of March 31, 2024, our Chief Executive Officer and Chief Financial Officer, conducted an evaluation of the effectiveness of the design and operation of our disclosure controls and procedures, as required by Exchange Act Rule 13a-15. Based on that evaluation, our Chief Executive Officer and Chief Financial Officer concluded that our disclosure controls and procedures were not effective as of the end of the period covered by this report. Disclosure controls and procedures are controls and other procedures that are designed to ensure that information required to be disclosed in our reports filed or submitted under the Exchange Act is recorded, processed, summarized, and reported, within the time periods specified in the SEC’s rules and forms. Disclosure controls and procedures include, without limitation, controls and procedures designed to ensure that information required to be disclosed in our reports filed under the Exchange Act is accumulated and communicated to management, including our Chief Executive Officer and our Chief Financial Officer, to allow timely decisions regarding required disclosure.
Evaluation of Disclosure Controls and Procedures
Our management evaluated the effectiveness of our disclosure controls and procedures as defined in Rule 13a-15(c) and 15d-15(e) under the Exchange Act, as of March 31, 2024. Our disclosure controls and procedures are designed to provide reasonable assurance that information we are required to disclose in the reports we file or submit under the Exchange Act is accumulated and communicated to our management, including our CEO and CFO, as appropriate to allow timely decisions regarding required disclosures, and is recorded, processed, summarized, and reported within the time periods specified in the SEC’s rules and forms.
Based on this evaluation, and because of the material weaknesses described below, our CEO and CFO have concluded that our disclosure controls and procedures were not effective at the reasonable assurance level as of March 31, 2024.
Management’s Annual Report on Internal Control Over Financial Reporting
Our management is responsible for establishing and maintaining adequate internal control over financial reporting as defined in Rules 13a-15(f) and 15d-15(f) under the Exchange Act. Internal control over financial reporting is a process designed to provide reasonable assurance of the reliability of financial reporting and of the preparation of financial statements for external reporting purposes, in accordance with U.S. GAAP.
Internal control over financial reporting includes policies and procedures that (1) pertain to the maintenance of records that, in reasonable detail, accurately and fairly reflect transactions and disposition of assets; (2) provide reasonable assurance that transactions are recorded as necessary to permit preparation of financial statements in accordance with GAAP, and that receipts and expenditures are being made only in accordance with the authorization of its management and directors; and (3) provide reasonable assurance regarding the prevention or timely detection of unauthorized acquisition, use or disposition of our assets that could have a material effect on the financial statements.
Under the supervision and with the participation of our management, including our CEO and CFO, we conducted an evaluation of the effectiveness of our internal control over financial reporting based on criteria established in the framework inInternal Control - Integrated Framework (2013) issued by the Committee of Sponsoring Organizations of the Treadway Commission. Based on this evaluation, and because of the material weaknesses described below, our management concluded that our internal control over financial reporting was not effective as of March 31, 2024.
Because of its inherent limitations, internal control over financial reporting may not prevent or detect misstatements. Also, projections of any evaluation of effectiveness to future periods are subject to the risks that controls may become inadequate because of changes in conditions, or that the degree of compliance with the policies or procedures may deteriorate.
These material weaknesses did not result in any identified misstatements to the financial statements, and there were no changes to previously released financial results.
Pannell Kerr Forster of Texas, P.C., an independent registered public accounting firm, that audited the financial statements included in this annual report has issued an attestation report on the Company’s internal control over financial reporting, which is included in this report.
Material weaknesses and management’s remediation plan
A material weakness is a deficiency, or a combination of deficiencies, within the meaning of Public Company Accounting Oversight Board (“PCAOB”) Auditing Standard AS 2201, in internal control over financial reporting, such that there is a reasonable possibility that a material misstatement of the Company’s annual or interim financial statements will not be prevented or detected on a timely basis.
Internal control over financial reporting is a process designed to provide reasonable assurance regarding the reliability of financial reporting and the preparation of financial statements in accordance with GAAP. The following material weaknesses in our internal control over financial reporting were identified in the normal course as of March 31, 2024:
The Company failed to maintain an effective control environment due to the following:
| ● | the Company failed to fully resolve identified segregation of duties conflicts with system access for designated business and IT users, thus related user access review and application change management procedures around logging could not be relied upon for select Company systems. |
| ● | the Company failed to maintain effectively designed Information Technology General Controls (“ITGCs”) in the areas of user access, application change management, logical access controls, and segregation of duties for one of the Company’s third-party information technology system that supports the Company’s financial reporting process. |
| ● | the Company failed to effectively execute management review procedures to validate the completeness and accuracy of transactions and to clearly define and evidence the process used and criteria and judgment applied in performance of critical business activities. |
Management’s Remediation Initiatives
We have concluded that these material weaknesses arose because we did not have the necessary business processes, systems, personnel, and related internal controls.
Management, with the oversight of the Audit Committee of the Board of Directors, has been actively engaged in remediation efforts to address the material weaknesses throughout 2024, and these efforts will continue into 2025.
We have made enhancements to our control environment by improving guidance, communication of expectations, and importance of internal controls . Specifically, the Board of Directors formally approved the annual budget and delegation of authority over company transactions, and a whistleblower hotline and accompanying reporting process was implemented. In addition, accounting policies related to journal entries and invoice approval were adopted and IT policies and procedures were developed. The Company hired personnel in key positions, and management continues to assess the hiring of additional personnel to ensure that the Company has a sufficient complement of qualified personnel at the right levels, based on any identified gaps in personnel requirements.
Due to accounting system limitations, management is limited in its ability to effectively design and implement general information technology controls around select systems that support the underlying business cycle controls. Management is planning an evaluation of a new accounting system during the next fiscal period. The new system will allow management to effectively design and implement appropriate general information technology controls including enforced segregation of duties. Management will also continue the rollout of IT remediation action plans, including developing an enhanced risk assessment process for third-party IT systems and implementation of IT monitoring procedures. In addition, management will continue to evaluate organization structure and hiring of personnel, and enhancement of management review procedures to validate completeness and accuracy of transactions at the time of review.
Remediation of Previously Identified Material Weaknesses
The following material weaknesses were previously disclosed in our Annual Report on Form 10-K for the year ended March 31, 2023:
| ● | the Company’s management and the governance did not maintain appropriately designed entity-level controls impacting the control environment to prevent or detect material misstatements to the consolidated financial statements. These deficiencies were attributed to limited personnel to assist with the accounting and financial reporting function and inadequate oversight and accountability over the performance of control activities, including establishment of a Whistleblower Hotline and lack of formalization of certain key governance elements: management delegation, annual board committee charter review, acknowledgement of code of conduct, and approval of the annual budget; |
| ● | the Company failed to maintain effectively designed controls over journal entries, both recurring and nonrecurring, account reconciliations, and periodic flux analysis. Journal entries were not always accompanied by sufficient supporting documentation and were not adequately reviewed and approved for validity, completeness, and accuracy. In most instances, persons responsible for reviewing journal entries and account reconciliations for validity, completeness, and accuracy were also responsible for preparation. |
We have concluded that with the exception of a lack sufficient number of qualified personnel and continued enhancement of management review procedures as discussed above, these material weaknesses have been remediated.
Changes in Internal Controls over Financial Reporting
There was a change in our internal control over financial reporting (as such term is defined in Exchange Act Rule 13a-15(f)) that occurred during our most recent quarter that has materially affected or is reasonably likely to materially affect, our internal control over financial reporting.
Throughout fiscal 2024 and including our most recent fiscal quarter ended March 31, 2024, we have undertaken measures to remediate the previously disclosed material weaknesses. Management intends to implement certain remediation steps to address the material weaknesses described under Management’s Remediation Initiatives. However, management has not fully implemented those remediation steps and expects remediation efforts to continue into fiscal year 2025.
While these actions and planned actions are subject to ongoing management evaluation and will require validation and testing of the design and operating effectiveness of internal controls over a sustained period of financial reporting cycles, we are committed to the continuous improvement of our internal control over financial reporting and will continue to diligently review our internal control over financial reporting.
To the Stockholders and Board of Directors of
AMMO, Inc.
Opinion on Internal Control over Financial Reporting
We have audited AMMO, Inc.’s (the “Company’s”) internal control over financial reporting as of March 31, 2024, based on criteria established inInternal Control—Integrated Framework (2013) issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). In our opinion, because of the effect of the material weaknesses described in the following paragraph on the achievement of the objectives of the control criteria, the Company has not maintained effective internal control over financial reporting as of March 31, 2024, based on criteria established inInternal Control—Integrated Framework (2013) issued by COSO.
A material weakness is a control deficiency, or a combination of deficiencies, in internal control over financial reporting, such that there is a reasonable possibility that a material misstatement of the Company’s annual or interim financial statements will not be prevented or detected on a timely basis. The following material weaknesses have been identified and included in management’s assessment.
| ● | Certain information technology (“IT”) controls for security and administration of key IT systems did not operate effectively throughout the year. Specifically, (i) periodic user access reviews of roles and permissions were not performed sufficiently throughout the period for certain key IT systems, (ii) certain key IT systems were not logically restricted between business and IT administration access privileges, resulting in improper segregation of duties for certain business processes, and (iii) log monitoring was not in place to track business and IT administrator activities. |
| ● | Controls were not effectively designed in the areas of user access, application change management, logical access and segregation of duties for one third party system which supports the Company’s financial reporting process. |
| ● | Controls were not appropriately executed or evidenced related to management review procedures and validation of the accuracy and completeness of information used in the performance of controls. |
These material weaknesses were considered in determining the nature, timing, and extent of audit tests applied in our audit of the 2024 financial statements, and this report does not affect our report dated June 13, 2024, on those financial statements.
We also have audited, in accordance with the standards of the Public Company Accounting Oversight Board (United States) (PCAOB), the consolidated balance sheets and the related consolidated statements of operations, stockholders’ equity, and cash flows of the Company, and our report dated June 13, 2024, expressed an unqualified opinion.
Basis for Opinion
The Company’s management is responsible for maintaining effective internal control over financial reporting, and for its assessment of the effectiveness of internal control over financial reporting, included in the accompanyingManagement’s Annual Report on Internal Control over Financial Reporting. Our responsibility is to express an opinion on the Company’s internal control over financial reporting based on our audit. We are a public accounting firm registered with the PCAOB and are required to be independent with respect to the Company in accordance with the U.S. federal securities laws and the applicable rules and regulations of the Securities and Exchange Commission and the PCAOB.
We conducted our audit in accordance with the standards of the PCAOB. Those standards require that we plan and perform the audit to obtain reasonable assurance about whether effective internal control over financial reporting was maintained in all material respects. Our audit of internal control over financial reporting included obtaining an understanding of internal control over financial reporting, assessing the risk that a material weakness exists, and testing and evaluating the design and operating effectiveness of internal control based on the assessed risk. Our audit also included performing such other procedures as we considered necessary in the circumstances. We believe that our audit provides a reasonable basis for our opinion.
Definition and Limitations of Internal Control over Financial Reporting
A company’s internal control over financial reporting is a process designed to provide reasonable assurance regarding the reliability of financial reporting and the preparation of financial statements for external purposes in accordance with generally accepted accounting principles. A company’s internal control over financial reporting includes those policies and procedures that (1) pertain to the maintenance of records that, in reasonable detail, accurately and fairly reflect the transactions and dispositions of the assets of the company; (2) provide reasonable assurance that transactions are recorded as necessary to permit preparation of financial statements in accordance with generally accepted accounting principles, and that receipts and expenditures of the company are being made only in accordance with authorizations of management and directors of the company; and (3) provide reasonable assurance regarding prevention or timely detection of unauthorized acquisition, use, or disposition of the company’s assets that could have a material effect on the financial statements.
Because of its inherent limitations, internal control over financial reporting may not prevent or detect misstatements. Also, projections of any evaluation of effectiveness to future periods are subject to the risk that controls may become inadequate because of changes in conditions, or that the degree of compliance with the policies or procedures may deteriorate.
/s/ PANNELL KERR FORSTER OF TEXAS, P.C.
Houston, Texas
June 13, 2024
The text of this filing, as the company filed it with the SEC, without its images or exhibits. This is not investment advice.